Bobcares

Fixing Cloudflare error 1020 access denied

by | Jun 3, 2020

Cloudflare error 1020 access denied is caused due to restrictions placed by firewall rules. Webmasters, particularly with developers working from another country, may experience this error frequently.

Our Support Engineers help to resolve similar Cloudflare errors as a part of our Server Management Services.

Today we will look at the cause for this error, and the solutions that worked for us.

 

What causes Cloudflare error 1020 access denied?

In a recent support request that we received, the webmaster’s developer working from another country is unable to access the website. The error message on the screen was:

access denied

In general, WAF firewall rules blocking access to the website can trigger the above error message.

If you are receiving this error on any random site, it means the website owner has implemented a Firewall rule in Cloudflare. This rule is either blocking your IP address, browser, or country.

Likewise, if you receive this error for your own site, it can be fixed easily by proper identification and modification of the offending rule.

 

Find the rule that triggered Cloudflare error 1020 access denied

The first step is to confirm if the error is actually related to Cloudflare. Temporarily disabling it from the Cloudflare portal can confirm it.  The Pause Cloudflare on Site option under the Overview tab in the Cloudflare portal can stop Cloudflare temporarily.

Cloudflare error 1020 access denied

Once it is confirmed that the issue is with Cloudflare end, the next step to fix the access denied error is to find the exact rule that triggered the error. A search for the RAY ID in the Firewall Events Log will provide a clue on the rule id.

The following steps will help us to access the WAF event logs:

1. Log in to the Cloudflare dashboard.2. Click the appropriate Cloudflare account.3. Select the proper domain.4. Click the Firewall app.5. The Overview tab lists the Activity log.6. Click any entry in the Firewall Activity log to expand further details.

 

Once we are in the Firewall Activity log, Filters can be added based on RAY ID from the Add filter option

Cloudflare error 1020 access denied

For more details on adding filters and sharing the details, refer to the official Cloudflare page.

 

Edit Firewall rules

Once we find the exact rule, the next step is to make changes to the rule to make the website accessible.  The rules will be visible under the Firewall rules option in the Firewalls section. To edit the rule, click on the wrench icon next to the rule.

Cloudflare error 1020 access denied

Turn off Firewall rules

At times, if the Firewall activity log may not provide a clue on the exact rule id. Hence, we then will need to go for a trial and error method. That is, we need to disable all the firewall rules and then enable them one by one. Just a click on the toggle switch next to the rule id will turn the rule ON/OFF.

Cloudflare error 1020 access denied

[Need help to Fix the Cloudflare error 1020 access denied? We are available 24×7.]

 

Conclusion

To sum up, the restrictions placed by WAF rules generally triggers the Cloudflare error 1020 access denied. Proper identification and modification of the rule can fix the error. Today we discussed the different methods that our Support engineers use to find the exact rule and to resolve the error

PREVENT YOUR SERVER FROM CRASHING!

Never again lose customers to poor server speed! Let us help you.

Our server experts will monitor & maintain your server 24/7 so that it remains lightning fast and secure.

GET STARTED

var google_conversion_label = "owonCMyG5nEQ0aD71QM";

0 Comments

Submit a Comment

Your email address will not be published. Required fields are marked *

Never again lose customers to poor
server speed! Let us help you.

Privacy Preference Center

Necessary

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

PHPSESSID - Preserves user session state across page requests.

gdpr[consent_types] - Used to store user consents.

gdpr[allowed_cookies] - Used to store user allowed cookies.

PHPSESSID, gdpr[consent_types], gdpr[allowed_cookies]
PHPSESSID
WHMCSpKDlPzh2chML

Statistics

Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

_ga - Preserves user session state across page requests.

_gat - Used by Google Analytics to throttle request rate

_gid - Registers a unique ID that is used to generate statistical data on how you use the website.

smartlookCookie - Used to collect user device and location information of the site visitors to improve the websites User Experience.

_ga, _gat, _gid
_ga, _gat, _gid
smartlookCookie
_clck, _clsk, CLID, ANONCHK, MR, MUID, SM

Marketing

Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

IDE - Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.

test_cookie - Used to check if the user's browser supports cookies.

1P_JAR - Google cookie. These cookies are used to collect website statistics and track conversion rates.

NID - Registers a unique ID that identifies a returning user's device. The ID is used for serving ads that are most relevant to the user.

DV - Google ad personalisation

_reb2bgeo - The visitor's geographical location

_reb2bloaded - Whether or not the script loaded for the visitor

_reb2bref - The referring URL for the visit

_reb2bsessionID - The visitor's RB2B session ID

_reb2buid - The visitor's RB2B user ID

IDE, test_cookie, 1P_JAR, NID, DV, NID
IDE, test_cookie
1P_JAR, NID, DV
NID
hblid
_reb2bgeo, _reb2bloaded, _reb2bref, _reb2bsessionID, _reb2buid

Security

These are essential site cookies, used by the google reCAPTCHA. These cookies use an unique identifier to verify if a visitor is human or a bot.

SID, APISID, HSID, NID, PREF
SID, APISID, HSID, NID, PREF